U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Management Controls Should Be Strengthened to Improve Hardware Asset Inventory Reliability

Report Information

Date Issued
Report Number
2018-20-041
Report Type
Audit
Joint Report
Yes
Participating OIG
Treasury Inspector General for Tax Administration
Agency Wide
Yes (agency-wide)
Questioned Costs
$0
Funds for Better Use
$0
View Report

Recommendations

The Chief Information Officer should identify high-risk hardware asset categories that may potentially contain Personally Identifiable Information, update guidance to further define that high-risk assets not verified for one inventory cycle be immediately categorized as missing in the KISAM-AM module, and specify a time frame to complete the 10 research steps for locating missing assets.

The Chief Information Officer should direct responsible personnel to prioritize locating high-risk missing assets that may potentially contain Personally Identifiable Information when conducting the 10 research steps and immediately report assets determined as lost to the IRS's Computer Security Incident Response Center and TIGTA's Office of Investigations.